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In practical quantum key distribution system, the state preparation and measurement have state- 
dependent imperfections comparing with the ideal BB84 protocol. If the state-dependent imper- 
fection can not be regarded as an unitary transformation, it should not be considered as part of 
quantum channel noise introduced by the eavesdropper, the commonly used secret key rate formula 
GLLP can not be applied correspondingly. In this paper, the unconditional security of quantum 
key distribution with state-dependent imperfections will be analyzed by estimating upper bound of 
the phase error rate in the quantum channel and the imperfect measurement. Interestingly, since 
Eve can not control all phase error in the quantum key distribution system, the final secret key rate 
2"^ ' under constant quantum bit error rate can be improved comparing with the perfect quantum key 

distribution protocol. 

o . 

Q ! INTRODUCTION 

o: 

Quantum key distribution (QKD) is the art of sharing secret keys between the transmitter Alice and receiver 
Bob. It has unconditional security, even if unlimited computational power and storage capacity are controlled by the 
eavesdropper Eve. Since the QKD protocol has been proposed by Bennett and Brassard in 1984 [lj], the unconditional 
Oh' security attracts a lot of attentions both in theory and experimental sides 0]- Theoretical physicists have analyzed 
+L> • unconditional security of QKD in many respects. Initially, Lo and Chau Q proposed the security analysis with the 
help of quantum computer. Then, Shor and Preskill Q proved security of prepare-and-measure protocol is equival to 
entanglement-based protocol, thus unconditional security of QKD has been proved combining with the CSS code and 
q-( entanglement distillation and purification (EDP) technology. Without applying the EDP technology, Renner [H[ has 
analyzed security of QKD with information theory method. More recently, Horodecki et al. Q have analyzed security 
of QKD based on Private-entanglement states. Inspired by Horodecki's mind, Renes and Smith Q have analyzed 
noisy processing allows some phase errors to be left uncorrected without compromising unconditional security of 
£■ — ' the key. However, all of the security analysis are based on perfect states preparation and measurement. The first 
unconditional security of QKD based on imperfect devices was proposed by Gottesman, Lo, Lukenhaus, and Preskill 
Q (GLLP formula), they proved that only the single photon state transmitted in the quantum channel can be used 
to generate the final secret key. Applying the GLLP formula and decoy state method Q , security of the decoy state 
QKD has been analyzed by Lo [l(]] and Wang [ll[ respectively. Correspondingly, the secret key transmission distance 
can be improved greatly with decoy state method [13, EH- More recently, Berta et al. 14, 15 1 have given a method 
for proving Bob's device independent QKD protocol by using the uncertainty relation, which is related to the earlier 
work by Koashi jl6j . but it also requires that the state preparation in Alice's side should be well characterized. 
. £h ' Obviously, if the imperfection is basis-dependent, we can consider a slightly changed protocol, where the state 
preparation and measurement are perfect, while there is an virtual unitary transformation controlled by Eve introduces 
the basis-dependent imperfection in the quantum channel. Since security of the original protocol is no less than the 
slightly changed protocol, the final secret key rate can be estimated utilizing the GLLP formula. However, most of 
the imperfection in states preparation and measurement are state-dependent 17|, [18J , which can not be controlled by 
Eve in the security analysis. For instance, the wave plate may be inaccurate in polarization based QKD system, while 
the phase modulator may be modulated by inaccurate voltage in phase-coding QKD system. If the imperfection can 
not be illustrated as an unitary transformation, it can no be considered as part of the quantum channel controlled by 
Eve. 

In this paper, security of practical QKD system with state-dependent imperfections will be analyzed by considering 
imperfect states preparation in Alice's side and imperfect states measurement in Bob's side respectively. We apply 
the EDP technology by considering the most general imperfection, and a much better secret key rate under constant 
imperfect parameters has been analyzed in comparation with previous works. Comparing with the security analysis 
given by Mar0y et al. fl7| and Lydersen et al. [Hj], we apply a much simpler method and get a much higher 
secret key rate. We consider that states prepared by Alice and measured by Bob both have individual imperfections. 
The whole security analysis can be divided into two steps based on an virtual protocol. Firstly, we consider that 
Alice prepares perfect entangled quantum state pairs, and she keeps half of the perfect entangled quantum state, 
sends half of the imperfect modulated quantum state to Bob, which illustrate the imperfect states preparation. 
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Meanwhile, Bob applies perfect Hadamard transformation in the receiver's side, thus Alice and Bob can share the 
maximally entangled quantum state utilizing the EDP technology. Secondly, Alice applies perfect measurement with 
her maximally entangled quantum states, and Bob applies imperfect measurement with his entangled quantum states 
correspondingly, finally they can establish the raw key. Similar to Shor and Preskill's [3] security analysis, security 
of the practical QKD is equal to the virtual protocol with the EDP technology and imperfect measurement. Since 
the phase error introduced by Bob's imperfect measurement should not be controlled by Eve, we can get a much 
higher secret key rate correspondingly. The similar result has also been given by Renner et al. 1^-21|, they proved 



that adding noise in the classical post processing can improve the secret key rate by considering that phase errors 
introduced in the post processing can not be controlled by the eavesdropper Eve Comparing with the security 
analysis given by Renner et al., the noise introduced by the imperfect device are precisely known by Eve, since the 
random encoding choice, the imperfection can not be corrected or controlled by Eve. Thus, the exactly known but can 
not be controlled imperfection is similar to adding noise as the security analysis model given by Kraus et al. lil 20|. 



SECURITY OF QUANTUM KEY DISTRIBUTION WITH PERFECT STATES PREPARATION AND 

MEASUREMENT 



Before introducing the method to analyze security of QKD with imperfect devices, security of QKD with perfect 
devices will be analyzed in this section. Suppose that Alice and Bob choose the polarization encoding QKD system 
in our security analysis, the standard prepare-and-measure QKD protocol will be introduced in the following section. 
In Alice's side, the classical bit is randomly encoded by quantum states |0°) or |45°), the classical bit 1 is randomly 
encoded by quantum states |90°) or | — 45°). In Bob's side, he randomly choose rectilinear basis {|0°}, |90°)} or 
diagonal basis {|45°), | —45°)} to measure the quantum state transmitted through the quantum channel. After Bob's 
perfect measurement and some classical steps of QKD (sifting, parameter estimation, error correction and privacy 
amplification), secret key bits can be shared between Alice and Bob. 

Following the technique obtained by Shor and Preskill |4j , security of prepare-and-measure QKD protocol is equal 
to security of entanglement-based QKD protocol, which can be constructed by considering the corresponding prepare- 
and-measure encoding scheme as shown in Fig.l. 

, * 





FIG. 1: Entanglement-based protocol with Pauli channel and eavesdropper Eve. Z is Eve's phase error operation, X is Eve's 
bit error operation. A\ is part of Alice's system, B\ is part of Bob's system. 

Alice prepares maximally entangled pairs \<j)\) — -^{\QQ)ab + After applying the Hadamard operation 

randomly to the second part of the pair, she sends Bob half of the pair. Bob acknowledges the reception of his state 
and applies the Hadamard operation randomly. In the security analysis, the most generally noisy channels we need 
to consider are Pauli channels. By considering Eve's eavesdropping in the Pauli channel, the quantum state about 
Alice, Bob and Eve is given by 



u,v,i,j 
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where H = ( J ^ ^ is the perfect Hadamard operator, which means the transformation between different bases 

in practical QKD system. ( ^ J is the X operator, which means the bit error introduced by Eve. ^ ^ ^ ^ is 

the Z operator, which means the phase error introduced by Eve. Correspondingly, XZ means the bit phase error 
introduced by Eve in the quantum channel. P uv , u, v S {0, 1} means the probability of the X U Z V operator introduced 
by Eve, which should be normalized by the following equation 



J2 p uv - 1- (2) 

Qij, i,j <E {0, ljmeans the probability of H l and H 3 matrix introduced by Alice and Bob respectively, which satisfies 
Qij = j for Alice and Bob's randomly choice. 

After the sifting step, the case of i ^ j will be discarded. We trace out Ai, B\ and Eve's systems to get the 
following equation 



pab = EPUh I A®x% i z B j<p 1 )(<j> 1 \z E2 x B : i ®i A 

u,v (3) 

+ \I A <g> H Bl Xl x Zl 2 H Al | <t>i)(ct>i\H Al Z- E2 H Bl ) ® I A . 

There are bit errors and phase errors in the Pauli channel, all of errors are considered to be introduced by Eve 
in the security analysis. After transmitting through the quantum channel, the initially shared maximally entangled 
state can be transformed into Bell states as the following equation 



\<h) = ^ s (\oo)AB + \n) AB ) ) 

\<h) = 7l(|01>AB + \10}ab), 

= Tf(ioo)^ - \n) AB ), W 

\d>4) = ^(\01) A B-\10) AB ). 

If the maximally entangled pairs |7Ti) is transformed into Bell state \<pi), there is no error can be introduced in the 
quantum channel. However, if the maximally entangled pairs |</>i) is transformed into Bell states {(fa), [fa) and \4>4) 
respectively, the bit error, phase error and bit phase error will be introduced by Eve correspondingly. Thus, the bit 
error rate and phase error rate can be given by 



e-bit = (02 1 Pas I </>2) + (</»4|pab|</>4), / g \ 

ephase = (03 I PAB |<^3> + (04 1 PAB \<j>4,}- 

The bit error rate and phase error rate should be calculated when we analyze unconditional security of QKD. In 
practical QKD system, quantum bit error rate can be estimated after the parameter estimation step in the classical 
part of QKD protocol. The main difficulty in security analysis is how to estimate upper bound of the phase error 
rate. 

Combining equations ([3]), (J4j) with (0, the phase error rate minus the bit error rate is 



ephase - eut = (02|PAB|02) ~ (03|/OAs|03) = 0. (6) 

Thus, the phase error can be estimated by the bit error rate accurately in the perfect device case. Correspondingly, 
the final secret key rate can be given by 



R=l- h(e phase ) - h(e bi t) = 1 - 2h{e bit ). (7) 

where, h is the binary entropy function. The maximal tolerated bit error rate in the quantum channel is 0.11 with 
equation (J7J, which has also been given by Shor and Preskill. 
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SECURITY OF QUANTUM KEY DISTRIBUTION WITH STATE-DEPENDENT IMPERFECTIONS 

Since practical QKD devices always have some flaws, the photon state preparation and measurement are always 
imperfect in practical QKD realizations. In the most general case, the imperfection is state-dependent. For example, 
the deflection angle has slight differences between different wave plates in polarization based QKD system. Similar to 
the security analysis of QKD with perfect devices, we will give the security analysis of QKD with imperfect devices in 
this section by utilizing the EDP technology and imperfect measurement. We firstly give the model description about 
the imperfect states preparation and measurement, then we will prove that the imperfect measurement is equal to 
the perfect measurement adding the noisy processing in our security analysis, finally security of the virtual protocol 
will be analyzed combining with the imperfect measurement and EDP technology. 

Device-independent imperfections description 

Angular deviation of the practical device can be used for illustrating the state-dependent imperfection. In Alice's 
side, the classical bit is randomly encoded by quantum states \ai°) or 45 + 0:2°), while the classical bit 1 is randomly 
encoded by quantum states |90 + a3°) or | — 45 + a4°), where a%, «3 and 04 are security parameters for illustrating 
Alice's angular deviations. In Bob's side, he randomly choose the imperfect rectilinear basis {|/3i°), 1 90 + /?3°)} or 
the imperfect diagonal basis {|45 + 02°), | — 45 + /?4°}} to measure the quantum state transmitted in the quantum 
channel, where fix, /?2, Pa and /?4 are security parameters for illustrating Bob's angular deviation. Since the random 
encoding and decoding choice, all of the imperfection can not be controlled or corrected by the eavesdropper, detailed 
illustration of the imperfect parameter can be given as in Fig. 2. 




FIG. 2: The most general imperfect states preparation and measurement in practical QKD experimental realization, where ai, 
02, Q3 and Q4 illustrates the imperfect states preparation, /3i, P2, fiz and /?4 illustrates the imperfect measurement. 

If the security parameter can be satisfied with a± = 0:3, a-i = a.4, /3± — /J3 and P2 = Pi, it will be the basis-dependent 
imperfection correspondingly. 

Imperfect measurement 

In practical QKD system with imperfect devices as illustrated in the previous subsection, Bob gets the classical 
bit with the projective measurement operator |/?i°)(/3i°| and |45 + /?2°)(45 + /?2°|, gets the classical bit 1 with the 
projective measurement |90 + /33°}(90 + /3a°\ and | — 45 + Pi°){— 45 + p±°\ respectively. Since the rectilinear basis and 
diagonal basis will be selected randomly, the quantum bit error rate introduced by the imperfect measurement can 
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be given by 



e&iti 



(90+ ) 33 O |0 o ){0 o |90+fe o ) ( ) 3 1 o |90 o )(90 o |fa o ) v 

2 1 2 V (90+ / 33 |0 )(0 |90+ / 3 3 ) + <^i |00><0 |/3 1 ) ~r (0i o |9O o )(9O o |/3i o ) + (9O+,33 o |9O o )(9O o |9O+/33 o ) 

1/ (-45+/3 4 |45 ){45 |-45+;34 ) ,„s 

2 V {-45+^4 O |45 o )(45 o |-45+04 O > + (45+& o |45 o )(45 o |45+ / 3, ) l°J 

I (45+fe |-45 ){-45°|45+fe 6 ) \i 

~T <45+ / 32 |-45 )(-45 |45+/32 ) + <-45+ f 34 |-45 )(-45 |-45+ f 3 4 ) II 

1 r 1 / sin 2 fix | sin 2 83 \ . 1 / sin 2 B 2 i sin 2 Pi '.l 

2 ^2 vS^flT+cos^flT ~r sitffli+cos^, J ' 2 \ sin^Bo+cos' 2 BA sin a ft, +cos a B-> )l m 



From this calculation, we can get the result that the imperfect measurement will introduce bit flipping with the 
probability euti- Comparing with the imperfect measurement, the perfect measurement will introduce the bit flipping 
with zero probability. In our security analysis, Alice and Bob should establish the maximally entangled pairs before 
applying the measurement, which means that the eavesdropper can only get the error bit information about the secret 
key through the imperfect measurement in Bob's side. Thus, we can simplify the imperfect measurement as the 
perfect measurement adding a noisy processing protocol, where the bit 0(1) will be transformed into 1(0) with the 
probability euti- 



Virtual EDP protocol 



We propose the virtual protocol based on the EDP technology as in Fig. 3. 




Alice 



FIG. 3: Entanglement-based quantum key distribution protocol with imperfect devices. We introduce the third party Ax, Bx 
in the new protocol, which can not be controlled by Alice, Bob and Eve respectively. In the first step, Alice and Bob share the 
maximally entangled pairs. In the second step, Alice applies the perfect measurement, Bob applies the perfect measurement 
and a noisy processing protocol to get the raw key. 



The new protocol mainly contain two steps: the first step is considering the maximally entangled state \4>\) to 
be shared between Alice and Bob. In the rectilinear basis case, the classical bit is prepared by the quantum state 
cos{a\)\Q°) + sin(ai)\l°) , while the classical bit 1 is prepared by the quantum state — sin(a 3 )\0°) + cos(aa)\l°). In the 
diagonal basis, the classical bit is prepared by the quantum state cos(a.2 + j)\0°) + sin(ct2 + , while the classical 

bit 1 is prepared by the quantum state cos(a4 — j)\0°)+sin(a4 : — j)\l o ). For simplicity, the state preparation can also be 
illustrated as the following case, Alice prepares the quantum state -±=(\0°)I Al \0°) + \l°)I Al |l°))|e ) + -^(|0 o }-ff j4l |0°) + 

\1°)Ha 1 |l°))|ei) and transmits half of the perfect state to Bob, where Ha 1 = ( cos ( a2 "J" 4.) cos(a>4 ^) \ _ 



sin(a 2 + f ) sra(a 4 - |) 

. , { / \ ) , len) and lei) are Alice's auxiliary quantum states. If Alice want to transmit the state 10°) 
sm{a\) cos(a 3 ) /' 1 ' 1 ' J H 17 

to Bob, the auxiliary quantum state eo) will be selected, and the practical quantum state I^JO ) = cos(ai)\0°) + 

sin(a±)\l°) will be transmitted in the quantum channel. Since all of the imperfect state can be analyzed similarly, the 

non-unitary matrix and Ia x can be used for illustrating the imperfect state preparation. In the receiver's side, 

Bob applies the unitary transformation Hb 1 or Ig 1 randomly, where Hb 1 = ^ j ^ j is the perfect Hadamard 
transformation, Ig 1 = ( _ n ] is the perfect identity transformation. Since Alice and Bob can apply the EDP 



x 1 , 

technology, they will share the maximally entangled quantum pairs before the imperfect measurement. 

The second step is applying the perfect and imperfect measurement in Alice's side and Bob's side respectively. 
More precisely, Alice measure the entangled quantum state with perfect rectilinear basis {0°), |90°)} or diagonal basis 
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{45°), | — 45°}}. Bob measure the entangled quantum state with the imperfect rectilinear basis {|/3i°), 1 90 + /33°}} or 
imperfect diagonal basis {|45 + /3 2 °), | — 45 + /?4°}} correspondingly, then Alice and Bob will share the raw key. 

Similar to the security analysis based on the prefect device, A x and Bi can not be changed by Alice and Bob in 
our security analysis, it can not be changed by Eve simultaneously. However, A\ and B\ are permitted to share the 
imperfection information with Alice, Bob and Eve. In the virtual protocol, the state preparation and measurement is 
the same as the original practical QKD system. If the unconditional security of the virtual protocol can be proved, 
security of the practical QKD system can be proved naturally. By considering Eve's eavesdropping in the Pauli 
channel, the quantum state about Alice and Bob before the measurement can be given by 

u,v,i,j 

After the sifting step, the case of i ^ j will be discarded. We trace out Eve, Ai and B[s systems, the density matrix 
about Alice and Bob can be given by 

p ab = Y.Puv(\Ia®Ib 1 xi i zij a Mi)^i\Ia 1 zixi i i Bi ®i a + 

u,v (10) 

\Ia <g> H Bl X Ei Z E2 H Al \4>i) {4>i\H Al Z E2 X Ei H Bl ®I A ). 

Suppose that Alice prepare maximally entangled quantum states </>i}® N in her side. After the EDP protocol, Alice 
and Bob will share maximally entangled quantum states |</>i)® M , which can be illustrated as the following equation 

M = N(l - h{e ut ) - h(e p hase)), 

eut = {<h\PAB\<h) + (Mp'ab\4>4), (11) 

Sphase = (03 I PAB I fa) + (</>4 | P A B I <M , 

where eut and e p hase are the quantum bit error rate and phase error rate between Alice and Bob by considering 
the EDP technology. Since the calculation of eut an d e. p hase ar e much difficulty, we will get the calculation result 
based on some special imperfect parameters and the Mathematic software. Additionally, Bob will apply the imperfect 
measurement with the perfect entanglement quantum state as illustrated in the imperfect measurement subsection, 
Alice will apply the perfect measurement with the perfect entanglement quantum state correspondingly. Considering 
the virtual protocol, the practical quantum bit error rate between Alice and Bob can be estimated by 



Q = 1 - (1 - e 6it i)(l - eut) - eut<Zbm, (12) 

this equation means that the practical quantum bit error rate can be divided into two cases (considering the EDP 
protocol and the perfect measurement in Alice's side and imperfect measurement in Bob's side respectively). The first 
case is considering the EDP protocol has the right bit, the measurement protocol has the error bit. The second case 
is considering the EDP protocol has the error bit, the measurement has the right bit respectively. We can estimate 
Eve's information through the whole bit error rate and the phase error rate in the first step. Finally, the secret key 
rate can be given by 



R > lirriN^oo — - — _L±t±±}l 

= (1 - h(e phase ) - h{e bit )){l - h(e bit i)). 

the calculation of which is much complicated for the formula has too many security parameters, we will give some 
examples to illustrate how to use this secret key rate formula in practical QKD system. 

We give a simple example in the following, we suppose that the imperfect parameters in our security analysis are 

Oil = CH3 = f3\ — 03 — 0, a 2 = 02 = ^p, «4 = /?4 = ■ Thus, we can get H Al = I Al = ^ q j ^ > tms case means that 

Alice only send the rectilinear basis {|0°), |90°)}, and Bob will only measure in the rectilinear basis correspondingly. 
The quantum bit error rate and phase error rate in the EDP protocol can be calculated respectively as the following 
equation 

eut = |(Poo+Poi +3pio + 3j3n), 
e p hase = j(poo + 3p i + Pio + 3pii)- 
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Correspondingly, upper bound of the phase error rate can be estimated by 

ephase < eat + 5 | pw — Poi \< e bit + \. (15) 

Finally, we can only get zero secret key rate utilizing equation (|13[) . In practical experimental realization, Eve can 
measure Alice's states in the same rectilinear basis with bit error, and she will introduce the perfect man-in-the- 
middle attack without being discovered. 



CALCULATION 



To compare our security analysis with GLLP's security analysis, we will give the calculation result by considering 
the case which can not be analyzed by the GLLP formula in this section. We consider that the device has individual 
imperfections both in the transmitter's side and receiver's side respectively, which means quantum states in the same 
basis maybe have the different angular deviation. Precisely, we assume that the security parameters can be satisfied 
with ai = 0i = /?2 = a , a 2 — «3 = 0J4 = (83 = /?4 = 0. After some lengthy but not very interesting algebra, the bit 
error rate and phase error rate in the first step (Alice and Bob establish the maximally entangled quantum pairs with 
the EDP technology) can be calculated respectively as following equations, 



em = I [cos 2 (a) (pn +p w ) + sin 2 (a)(j> 00 +P01) + cos(a)(2p w - 2p n ) + 4p i + P10 +Pu] 
+ l[cos 2 {a)(j>n +p w ) + sin 2 (a)(p 00 +P01) + cos(a)(-2p w + 2p n ) + Pw + 5pn], 



(16) 



e p hase = \[cos 2 {a){poo +P01) + sin 2 (a)(p 10 + p n ) + cos(a)(2p 01 - 2p 00 ) + 4p 10 + p 01 + p 00 ] 
+ i [cos 2 (a) (pn +pio) + sin 2 (a)(p 00 + p i) + cos(a)(-2p w + 2p n ) + P10 + 5pn]. 

Equations (fT6|) and (JTTJ) can be directly calculated combining equation (fTT|) with practical imperfect parameters. From 
this calculation, we can find that the phase error rate is equal to the bit error rate in case of all imperfect parameters 
are equal to zero. 

From this calculation result, upper bound of the phase error rate can be estimated by considering the following 
inequation 

\e p h ase &bit \ 

< 1 1 [cos 2 (a) {pu +p w - poo -Poi) + sin 2 (a)(p m + p Q0 - p n - p w ) 
+ 2cos(a)(p 10 - pn +poo -Poi) + 3poi - ipw + Pn ~ Poo]\ 

= i I [cos 2 (a) (pn +pio -poo -poi) + cos(a)(p 10 - p n + Poo - Poi) + 2p i - 2pi ]| ' 
= il[( cos2 ( a ) - l)(Pli +P10 -Poo -Poi) + (cos(a) - l)(pi -P11 +P00 -Poi)]| 

< |(1 + sin 2 (a) — cos{a)) 



e p hase < 5(1 + sin 2 (a) - cos (a)) + e bit . (19) 
Utilizing equation (|8[). we can get the bit error rate euti as the following equation 

1 sin 1 (a) fOC\\ 

e bin - 2sin\a) + l- ^ ' 

Combining equations (TT^I) . ([T^| with (f^Uj) . we can get the final secret key rate formula as the following equation 



R > (1 - h($Eg*% + |(1 + *™ 2 {a) - cos{a))) ~ h($E^m - ft(ew«)), (21) 

combining wit this formula, we give the simulation result of the final secret key rate by considering practical imperfect 
security parameters as in Fig. 4. 

Since the detection setup has the individual imperfection in our security analysis, the GLLP security analysis result 
can not be applied in this case. Comparing with the perfect QKD protocol, the final secret key rate has been improved 
in our calculation result, the reason for which is that Eve can not control the phase error introduced by Bob's imperfect 
measurement, and it should no be corrected by Alice and Bob correspondingly. 
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Quantum bit error rate 

FIG. 4: Final secret key rate with perfect and imperfect devices. The blue line means the perfect devices case, which can 
be satisfied with equation |7]). The red line means security of imperfect devices by considering parameters ai = Pi = Pi = 
0.2, «2 = as = ct4 = Pa = At = 0. 



CONCLUSIONS 

In practical quantum key distribution realizations, the state-dependent imperfection in Alice and Bob's side can 
not be satisfied with the GLLP formula. A simple security proof of QKD with state-dependent imperfect states 
preparation and measurement have been analyzed in this paper. Our security analysis result shows that the imperfect 
QKD system maybe tolerate much higher quantum bit error rate comparing with the previous security analysis. 
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